CVE-2010-1530

Multiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with translate interface or administer blocks privileges, to inject arbitrary web script or HTML via (1) strings used in block translation or (2) the untranslated input.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:S/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
VendorProductVersion
reyeroi18n
6.x-1.0:x
reyeroi18n
6.x-1.0:x
reyeroi18n
6.x-1.0:x
reyeroi18n
6.x-1.0:x
reyeroi18n
6.x-1.0:x
reyeroi18n
6.x-1.0:x
reyeroi18n
6.x-1.0:x
reyeroi18n
6.x-1.1:x
reyeroi18n
6.x-1.2:x
reyeroi18n
6.x-1.3:x
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://drupal.org/node/764906
http://drupal.org/node/764998
http://osvdb.org/63589
http://secunia.com/advisories/39361
http://www.securityfocus.com/bid/39304
http://drupal.org/node/764906
http://drupal.org/node/764998
http://osvdb.org/63589
http://secunia.com/advisories/39361
http://www.securityfocus.com/bid/39304